Firms that are falsely using GDPR as a ‘scapegoat’ for non-compliance with Consumer Duty are risking severe action from the regulator, MorganAsh warns